Privacy Policy

This Privacy Policy explains how PT Putra Putri Sejahtera Bersama, operating under the brand eSIMTravel.id, collects, uses, stores, shares, and protects personal data when you:

• Visit esimtravel.id;
• Purchase an international eSIM;
• Book a Bali SIM card or eSIM;
• Book a tour or activity;
• Rent a car or motorbike;
• Contact our customer support team; or
• Otherwise interact with our products and services.

By using our website or submitting personal data to us, you acknowledge that you have read this Privacy Policy.

1. Who We Are

eSIMTravel.id is a travel connectivity and services platform operated by:

PT Putra Putri Sejahtera Bersama

We provide international eSIM products and facilitate Bali SIM cards, eSIMs, tours, activities, and vehicle rentals in collaboration with trusted service partners.

For privacy-related questions or requests, contact:

• Email: cs@esimtravel.id
• WhatsApp: +62 877 7556 3532
• Website: https://esimtravel.id

2. Personal Data We Collect

The personal data we collect depends on the product or service you use.

2.1 Contact and Account Information

We may collect:

• Full name;
• Email address;
• Telephone or WhatsApp number;
• Billing address;
• Account username and password;
• Nationality;
• Country of residence; and
• Preferred language.

2.2 Order and Payment Information

We may collect:

• Order or booking number;
• Products and services purchased;
• Transaction amount;
• Payment status;
• Bank transfer information;
• Proof of payment;
• Billing details;
• Refund information; and
• Limited information received from payment service providers.

When third-party payment gateways become available, payment card details may be collected and processed directly by the relevant payment service provider. eSIMTravel.id does not intend to store complete payment card numbers or card security codes on its own systems.

2.3 International eSIM Information

For international eSIM orders, we may collect:

• Destination country or region;
• Selected data package;
• Selected activation date and time;
• Device information;
• eSIM installation or activation status;
• Network troubleshooting information; and
• Technical information required to deliver and support the eSIM.

2.4 Bali SIM Card and eSIM Information

Mobile operator registration and airport collection may require:

• Full name;
• Nationality;
• A clear photo of your passport;
• Passport details;
• Boarding pass or flight information;
• Device IMEI;
• Arrival date and time;
• Booking confirmation;
• SIM registration status;
• Collection status; and
• Information about an authorised person collecting the product on your behalf.

Only submit identity documents belonging to you or documents that you are lawfully authorised to provide.

2.5 Tour and Activity Information

When you book a tour or activity, we may collect:

• Participant names;
• Number of participants;
• Tour date and time;
• Hotel, villa, or pickup location;
• Destination or itinerary;
• Special requests;
• Emergency contact information; and
• Information reasonably required by the tour operator.

Please do not submit health, accessibility, or dietary information unless it is necessary for the safe fulfilment of your booking.

2.6 Vehicle Rental Information

For car or motorbike rentals, we may collect:

• Full name and contact details;
• Nationality;
• Pickup and return details;
• Hotel, villa, or delivery location;
• Passport or identification information;
• Indonesian or international driving licence information;
• Rental dates;
• Vehicle inspection records;
• Photographs of the vehicle before and after rental;
• Security deposit information;
• Traffic violation or damage information; and
• Other information required under the rental agreement.

2.7 Communications and Customer Support

When you contact us, we may collect:

• Email and WhatsApp communications;
• Customer support history;
• Complaints and refund requests;
• Photographs, screenshots, and documents you provide;
• Call records or notes, where applicable; and
• Technical troubleshooting information.

2.8 Website and Device Information

When you access our website, we or our technology providers may automatically collect:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Approximate location;
• Referring website;
• Pages viewed;
• Date and time of access;
• Shopping cart activity;
• Cookie identifiers; and
• Website interaction and analytics data.

3. How We Collect Personal Data

We may collect personal data:

• Directly from you;
• Through our website and booking forms;
• Through email, WhatsApp, or customer support;
• From a person making a booking on your behalf;
• From our connectivity, airport, tour, or rental partners;
• From payment and banking providers;
• Through cookies and similar technologies; and
• From other parties involved in fulfilling or supporting your booking.

If you provide personal data about another person, you are responsible for ensuring that you have the authority to provide it and that the person understands how their information may be processed.

4. Why We Process Personal Data

We may process personal data for the following purposes:

4.1 To Fulfil Orders and Bookings

This includes:

• Delivering an eSIM QR Code;
• Scheduling eSIM activation;
• Registering a Bali SIM card or eSIM;
• Arranging airport collection;
• Confirming tours and activities;
• Arranging vehicle rentals;
• Processing payments and deposits; and
• Providing booking confirmations and service instructions.

4.2 To Provide Customer Support

We use relevant information to:

• Assist with installation and activation;
• Troubleshoot network issues;
• Handle schedule changes;
• Verify collection or service status;
• Process cancellations and refunds;
• Investigate complaints; and
• Communicate with service partners on your behalf.

4.3 To Operate and Improve Our Website

We may process technical and usage information to:

• Maintain website functionality;
• Secure accounts and transactions;
• Detect fraud or misuse;
• Analyse website performance;
• Understand customer preferences;
• Improve products and booking experiences; and
• Diagnose technical problems.

4.4 To Communicate With You

We may send:

• Order confirmations;
• Payment instructions;
• QR Codes;
• Booking updates;
• Activation reminders;
• Collection instructions;
• Schedule changes;
• Important service notices; and
• Responses to customer support requests.

4.5 Marketing Communications

With your consent where required, we may send information about:

• New eSIM packages;
• Bali travel services;
• Promotional offers;
• Travel guides; and
• Related products.

You may unsubscribe from marketing communications at any time. Unsubscribing from marketing does not prevent us from sending transactional or service-related messages.

4.6 Legal and Compliance Purposes

We may process personal data to:

• Comply with applicable laws and operator registration requirements;
• Maintain financial and transaction records;
• Respond to lawful government requests;
• Establish, exercise, or defend legal claims;
• Prevent fraud and unlawful activity; and
• Protect customers, our business, and our service partners.

5. Legal Grounds for Processing

Depending on the circumstances, we process personal data based on one or more of the following:

• Your consent;
• The performance of a contract or steps taken at your request before entering into a contract;
• Compliance with a legal obligation;
• Protection of your or another person’s vital interests;
• Our legitimate interests or those of another party, balanced against your rights; or
• Other lawful grounds permitted under applicable Indonesian law.

Where processing is based on consent, you may withdraw that consent. Withdrawal does not affect processing that was lawfully completed before consent was withdrawn.

Some information is required to fulfil a booking or comply with operator registration requirements. If you do not provide it, we may be unable to deliver or confirm the relevant product or service.

6. How We Share Personal Data

We only share personal data where reasonably necessary for the purposes described in this policy.

6.1 Connectivity and Mobile Operator Partners

We may share relevant information with eSIM providers, network providers, mobile operators, and airport service partners to:

• Issue an eSIM;
• Schedule activation;
• Register a SIM card or eSIM;
• Verify identity and IMEI information;
• Provide airport collection;
• Troubleshoot connectivity; and
• Confirm whether a product has been collected or activated.

6.2 Tour and Activity Partners

We may share booking details with tour operators, guides, transportation providers, attractions, and other parties required to deliver the booked service.

6.3 Vehicle Rental Partners

We may share identity, driving licence, booking, pickup, deposit, and other necessary information with vehicle owners, rental operators, and drivers.

6.4 Technology and Professional Service Providers

We may use third parties that provide:

• Website hosting;
• Cloud storage;
• Email delivery;
• Customer support systems;
• Website analytics;
• Security and fraud prevention;
• Accounting;
• Banking and payment processing; and
• Legal or professional services.

These providers should only process personal data for authorised purposes and subject to appropriate confidentiality or data-protection obligations.

6.5 Government and Law-Enforcement Authorities

We may disclose personal data where reasonably required to:

• Comply with applicable law;
• Respond to a legally valid request;
• Protect public safety;
• Investigate suspected fraud or unlawful activity; or
• Establish or defend legal claims.

6.6 Business Transfers

If all or part of our business is reorganised, acquired, merged, or transferred, relevant personal data may be disclosed or transferred as part of that transaction, subject to applicable legal requirements.

We do not sell personal data as a standalone commercial product.

7. Identity Documents

Passport photographs, boarding passes, driving licences, and IMEI information are collected only when reasonably necessary to:

• Register a SIM card or eSIM;
• Verify airport collection;
• Verify eligibility to rent a vehicle;
• Fulfil operator or service-partner requirements;
• Prevent fraud; or
• Comply with applicable law.

We aim to limit access to identity documents to authorised personnel and relevant service partners.

Identity documents should not be used for unrelated advertising or marketing purposes.

We retain these documents only for as long as reasonably necessary for registration, verification, dispute handling, fraud prevention, and applicable legal or operational requirements. After that period, they should be securely deleted, destroyed, or anonymised where appropriate.

8. International Data Transfers

International eSIM services and some technology providers may involve processing personal data outside Indonesia.

Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is made in accordance with applicable data-protection requirements, including through appropriate contractual, organisational, or technical safeguards where required.

The data-protection laws of the destination country may differ from Indonesian law.

9. Data Retention

We retain personal data only for as long as reasonably necessary to:

• Fulfil the purposes described in this policy;
• Complete a product or service;
• Maintain transaction and accounting records;
• Handle complaints, refunds, and disputes;
• Prevent fraud;
• Comply with applicable laws; and
• Establish or defend legal claims.

Retention periods may vary according to the type of data, product, service, legal requirement, and operational need.

When personal data is no longer required, we will take reasonable steps to delete, destroy, or anonymise it securely, unless continued retention is permitted or required by law.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Keep the website functioning;
• Maintain shopping cart and login sessions;
• Remember language or user preferences;
• Measure traffic and website performance;
• Understand how visitors use the website;
• Support security and fraud prevention; and
• Deliver relevant marketing where consent has been provided.

Cookies may include:

Essential Cookies

Required for core website functions such as account login, shopping cart, checkout, security, and language selection.

Analytics Cookies

Used to understand website traffic, visitor behaviour, and website performance.

Preference Cookies

Used to remember choices such as language and display preferences.

Marketing Cookies

Used to measure campaigns or display relevant advertising, subject to applicable consent requirements.

You may manage cookies through our cookie settings where available or through your browser. Disabling essential cookies may prevent parts of the website from functioning correctly.

11. Data Security

We use reasonable administrative, organisational, and technical measures intended to protect personal data against:

• Unauthorised access;
• Accidental loss;
• Unlawful use;
• Alteration;
• Disclosure; and
• Destruction.

These measures may include access restrictions, authentication controls, encrypted connections, security monitoring, staff confidentiality measures, and controlled sharing with service partners.

However, no website, transmission method, or storage system can be guaranteed to be completely secure.

Customers should protect their account credentials and avoid sending unnecessary identity documents through unofficial communication channels.

12. Personal Data Incidents

If a personal data incident occurs, we will investigate and take reasonable steps to contain and address it.

Where required by applicable law, we will notify affected individuals and the relevant authority within the legally required period and provide available information about the incident and recommended protective actions.

13. Your Rights

Subject to applicable law and relevant exceptions, you may have the right to:

• Obtain information about how your personal data is processed;
• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request deletion or destruction of personal data;
• Withdraw consent;
• Object to or request restriction of certain processing;
• Obtain or transfer personal data in an appropriate format where applicable;
• Object to decisions based solely on automated processing where applicable;
• Submit a complaint; and
• Exercise other rights available under applicable data-protection law.

Some requests may be limited where continued processing or retention is required to fulfil a booking, comply with legal obligations, prevent fraud, or establish or defend legal claims.

14. How to Exercise Your Rights

To submit a privacy request, contact:

• Email: cs@esimtravel.id
• WhatsApp: +62 877 7556 3532

Please use the subject:

Personal Data Request – [Your Name]

Include:

• Your full name;
• Order or account details, if relevant;
• The right or request you wish to exercise; and
• Sufficient information for us to locate the relevant data.

We may need to verify your identity before processing a request. Only provide additional identity documents when specifically requested through an official communication channel.

We will respond within the period required by applicable law.

15. Children’s Privacy

Our website and services are not primarily directed to children.

A parent, guardian, or authorised adult should make bookings and provide personal data on behalf of a child where necessary.

Vehicle self-drive services are only available to customers who meet the minimum age and driving licence requirements stated in the rental terms.

We do not knowingly use children’s personal data for direct marketing without the appropriate consent or other lawful basis.

16. Third-Party Websites

Our website may contain links to mobile operators, travel providers, attractions, social media platforms, or other third-party websites.

Their privacy practices are governed by their own privacy policies. eSIMTravel.id is not responsible for the privacy practices or content of third-party websites that we do not control.

17. Automated Processing

We may use automated tools for routine activities such as:

• Fraud screening;
• Website security;
• Spam prevention;
• Order routing;
• Analytics; and
• Service recommendations.

We do not intend to make decisions producing significant legal or similar effects based solely on automated processing without appropriate safeguards where required.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our products, service partners, technology, payment methods, or legal obligations change.

The latest version will be published on this page with an updated “Last updated” date.

Where a change materially affects how we process personal data, we will provide additional notice or request consent where required.

19. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our handling of personal data, contact:

PT Putra Putri Sejahtera Bersama
Operating as eSIMTravel.id

• Email: cs@esimtravel.id
• WhatsApp: +62 877 7556 3532
• Website: https://esimtravel.id